IETF Logo Mail Archive

Re: [lamps] is the CSRattr ASN.1 broken or not ... Re: New Version Notification for draft-richardson-lamps-rfc7030-csrattrs-02.txt

"Blumenthal, Uri - 0553 - MITLL" <uri@ll.mit.edu> Tue, 05 April 2022 18:46 UTC

Return-Path: <prvs=209433a5f5=uri@ll.mit.edu>
X-Original-To: spasm@ietfa.amsl.com
Delivered-To: spasm@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4EE403A0FB0 for <spasm@ietfa.amsl.com>; Tue, 5 Apr 2022 11:46:32 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.906
X-Spam-Level:
X-Spam-Status: No, score=-6.906 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, MIME_QP_LONG_LINE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_NONE=0.001, T_SCC_BODY_TEXT_LINE=-0.01] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ih3cVSQ4XqE1 for <spasm@ietfa.amsl.com>; Tue, 5 Apr 2022 11:46:30 -0700 (PDT)
Received: from MX2.LL.MIT.EDU (mx2.ll.mit.edu [129.55.12.51]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4D1963A0F5C for <spasm@ietf.org>; Tue, 5 Apr 2022 11:46:29 -0700 (PDT)
Received: from LLEX2019-2.mitll.ad.local ([172.25.4.124]) by MX2.LL.MIT.EDU (8.16.1.2/8.16.1.2) with ESMTPS id 235IkSVL163903 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=FAIL); Tue, 5 Apr 2022 14:46:28 -0400
ARC-Seal: i=1; a=rsa-sha256; s=arcselector5401; d=microsoft.com; cv=none; b=ErrNrtu2vT2XV9xm4wM0nI9e4Exv/Oc4/3xLSL7ts2PH2m0lCupKLHMgCksLq6ch79rDrPIoPJVr4PklhopRKEk3K4W1o3m2BesD/xBTO9WCvNdSn5eCMtQZl4xuH6SzY/0dpFyreNMal09vSZ2gx1hVM46kl6WHMRZTJQhQZTGkC37nRqGMYz1LN21lmmdXZjmmbiWgeyCj431u43XQrcin+fr4Ic/rdsyM0ui6aQO3tyoiKt3EvO+fvn/9mJl9ThrNeqrG5ah9u+fDBP7o78UAQ0J9KfT/QaLR6RkIPgMqMTFNSubrw0vRgxgNpqi1yuTmxp/6FzHDcPSNW93sKg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector5401; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=BmYBGS34pjANLwhzjb/zFgMzmqt5ihSry+OPVJGKQHg=; b=kObKE5UKI7ISdntOAJ9rEU9nTFRFcFAfChXrpRYPC3gwXaimyBYxJ3VVp+cef8VWN7CWIqYN4U8Rnc9gH76id/iZDP6fmwg6nICDxjl7O3YVZW9m6yWgSp94q73HvVGI/KOsUqGGl8/wiZ9KrBFLJit3JASCzFWsUg2ON9RflvQstB+gUlJSzwbiVF94l2VfVcSjzsUcv1y18VCWx9NH91gNTF7bufNRpvRwnCpEuX217b+Rq1winNYOcVeXUeC6FI0eMU3Qpgk1OpV4gDWhHPdLjyBMcFb4WjJvS9iJWlYUQ6KDJ5DyfRZBYPy4EIAooAcC4tou+gqrPjKnQouzzA==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ll.mit.edu; dmarc=pass action=none header.from=ll.mit.edu; dkim=pass header.d=ll.mit.edu; arc=none
From: "Blumenthal, Uri - 0553 - MITLL" <uri@ll.mit.edu>
To: Russ Housley <housley@vigilsec.com>
CC: LAMPS WG <spasm@ietf.org>
Thread-Topic: [lamps] is the CSRattr ASN.1 broken or not ... Re: New Version Notification for draft-richardson-lamps-rfc7030-csrattrs-02.txt
Thread-Index: AQHYSOkYv70X9jmdykO32mYKZiGKdKzhoWqAgAAF4gD//766gA==
Date: Tue, 5 Apr 2022 18:46:26 +0000
Message-ID: <16A93472-149F-43E2-A2C5-A9B15E8FC605@ll.mit.edu>
References: <164667410940.12091.15394112688281514126@ietfa.amsl.com> <15416.1646681868@localhost> <D095D84D-9633-44BB-AA6F-440B8BC00F68@sn3rd.com> <5cfb6e20b225da072695a4f13088a8065203ca4e.camel@siemens.com> <27441.1649182739@localhost> <A3C15545-8810-482A-A79F-B9350B0CEC51@vigilsec.com>
In-Reply-To: <A3C15545-8810-482A-A79F-B9350B0CEC51@vigilsec.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
user-agent: Microsoft-MacOutlook/16.58.22021501
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 841c7b70-9e2a-4a09-cb28-08da173496ca
x-ms-traffictypediagnostic: BN0P110MB1514:EE_
x-microsoft-antispam-prvs: <BN0P110MB1514E1E75071FE081B222FE590E49@BN0P110MB1514.NAMP110.PROD.OUTLOOK.COM>
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: Qh7d2ukrRjia40SLNW+CodldtA8EEIeVPizQdAR3LaghJHnykBLTDqZV+KZPO0GGfdEmLzCis7V8yZ8uQoztJrttuUFxEF1SkDTzvC1/czE/Y0qcpBJN74a8bnc6cNm6Wt9CMbdqv0OMXn/BsxtX4iML3IGpGxdM2lsp2RhgHexpeBEjwFPYI9y3MzfGoMFMCJLaOMbmnHNfh/6yTLVmK96HCVOIROEbdgTgsbdGpACzA6r17wiJDrkVnBPoStCGiWZcIYRmetUepu1GLKwZ3vOujI59DFMyXi8oVfJdPBKXLlFYfv+EDqmH75H8dxOHiuba95hksAfOvz7hMVsl4OBnM5fzlOxhBybq1RgDuzP+kQbUJEDwVSw51xIfINBiXLm4Wy82WPfw29iHDXqQ70QRXb8iZW0TD48k/KBBakH+2MuPaSOphs698ua6aujXBd/QKUah8UzxB4XgW1zBAynzxURAHduPY7V9WaDiACoyFAqbKBYQjlpU6JKFANLyiol25RWLQHVmiNu2kdnDsCP5htvVhCNvAQfrBNzhkyg6mA8CV+BNcQ2SlxYeHbAU9Q/oYI6lHTaKowU4KefE7N/5/SZ4ukB99pCu0o2rF/hhspcfCzB1VbQaE3zUljL6qa1kmc/7pwL2Cl1MWzi4Pl2hwU7Uz+pe4dSJtS171YE9RS5bVKjSUzxn72Ynr0y3
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:BN0P110MB1419.NAMP110.PROD.OUTLOOK.COM; PTR:; CAT:NONE; SFS:(13230001)(366004)(6512007)(75432002)(66446008)(8676002)(4326008)(8936002)(99936003)(76116006)(66476007)(6506007)(86362001)(122000001)(64756008)(38100700002)(66556008)(66946007)(5660300002)(4744005)(38070700005)(186003)(316002)(6916009)(6486002)(71200400001)(508600001)(26005)(33656002)(2616005)(2906002)(45980500001)(357404004); DIR:OUT; SFP:1102;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: MsBKkcgn8Qvd3kjvTyaijPPND4q180I0bZ2xO5ftGNVQwD4rCLtTSqZiKZ+gpH/Db5/gNVR7xZ5eZcAAD1QGxwW0S+j0iTqqjU+xEEnlu81C3A27HMh66C/f+7v7wBr+R8kpfcjcGcdeKSWf+lAhfS/BFHbcEIrOv3Sx2oO2RP3BenavVvbu8V0YpjdTsokoAnKiIDiRyssQDgAyBuDnkPbVGtYSd1K4cCnsI2DxDAkUkuVHSvPcZk+N8Qhg3MgQSsLNvXMWuinsT54hqo+M+heZCVZyvmIPH1hBQ9vVlw8XcExTHqK5VFAnzUAXUakg/vnMdgbJucann+9Mog64EDqAML4gfbLMSxj+44wmmDayGr/zg1XJcZSAfJ4SGsCZPVlWkDtkQELAfYoRS2Rn/5rwI4cVRC77+2YKXdjom8w=
Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha256; boundary="B_3732014785_1020116297"
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: BN0P110MB1419.NAMP110.PROD.OUTLOOK.COM
X-MS-Exchange-CrossTenant-Network-Message-Id: 841c7b70-9e2a-4a09-cb28-08da173496ca
X-MS-Exchange-CrossTenant-originalarrivaltime: 05 Apr 2022 18:46:26.1332 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 83d1efe3-698e-4819-911b-0a8fbe79d01c
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN0P110MB1514
X-Proofpoint-GUID: gU09CqU6Au_hKCKbGkL7Bk32eRkeGrdQ
X-Proofpoint-ORIG-GUID: gU09CqU6Au_hKCKbGkL7Bk32eRkeGrdQ
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.425, 18.0.850 definitions=2022-04-05_06:2022-04-04, 2022-04-05 signatures=0
X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 spamscore=0 suspectscore=0 adultscore=0 mlxscore=0 phishscore=0 mlxlogscore=999 bulkscore=0 malwarescore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2202240000 definitions=main-2204050103
Archived-At: <https://mailarchive.ietf.org/arch/msg/spasm/vt3p8LQyyp5VqPCjUgCOcOwjS-8>
Subject: Re: [lamps] is the CSRattr ASN.1 broken or not ... Re: New Version Notification for draft-richardson-lamps-rfc7030-csrattrs-02.txt
X-BeenThere: spasm@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "This is a venue for discussion of doing Some Pkix And SMime \(spasm\) work." <spasm.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/spasm>, <mailto:spasm-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/spasm/>
List-Post: <mailto:spasm@ietf.org>
List-Help: <mailto:spasm-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/spasm>, <mailto:spasm-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 05 Apr 2022 18:46:32 -0000

I do not know whether the OLD ASN.1 syntax is easier to read for some.  

 

Far easier. Trivially easy. 

 

Note, that I’ve been dealing with ASN.1 since early 1990-ties, and maintain a fork of asn1c compiler. Which, mind you, won’t grok the “new” ASN.1.

 

This would be:

 

   CsrAttrs ::= SEQUENCE SIZE (0..MAX) OF AttrOrOID

 

   AttrOrOID ::= CHOICE (oid OBJECT IDENTIFIER, attribute Attribute }

 

   Attribute ::= SEQUENCE {

     type     AttributeType,

     values    SET SIZE(1..MAX) OF AttributeValue }

 

   AttributeType ::= OBJECT IDENTIFIER

 

   AttributeValue ::= ANY DEFINED BY AttributeType

v2.8.7 | Report a Bug | By Email